Data (Use and Access) Act 2025 makes consequential amendments to UK GDPR

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 came into force on 23 June 2026, making consequential amendments to UK GDPR. These amendments align UK GDPR with the requirements of the Data (Use and Access) Act 2025. Organizations processing personal data in the UK must review how these consequential amendments affect their data processing activities and compliance obligations. The regulations also include transitional provisions to facilitate the transition from existing requirements to the new framework.

What changed

• The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduce consequential amendments to UK GDPR to align it with the Data (Use and Access) Act 2025.
• Transitional provisions are included to facilitate the transition period as organizations implement changes required by the new regulations.

Who is affected

All organizations processing personal data in the United Kingdom under UK GDPR, particularly those affected by the Data (Use and Access) Act 2025 requirements.

Summary generated by a language model; the official text prevails. Not legal advice.